https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 14 Nov 2026 17:05:32 +0000 https://db.gcve.eu/vuln/cve-2026-107365 <p><strong>Affected:</strong> Grafana (built-in) Google Cloud Monitoring Datasource, Grafana OSS, Grafana Enterprise</p> <p>A user with query access to a Google Cloud Monitoring data source can use its resource proxy to send requests to other Cloud Monitoring API paths with the data source&#39;s credentials, and read data from any project those credentials can reach. When the data source forwards the user&#39;s OAuth identity or uses Workload Identity Federation, the impact depends on that credential&#39;s permissions. Fixed in Google Cloud Monitoring plugin 12.6.7.</p> <p><strong>Affected:</strong> Grafana (built-in) Google Cloud Monitoring Datasource, Grafana OSS, Grafana Enterprise</p> <p>A user with query access to a Google Cloud Monitoring data source can use its resource proxy to send requests to other Cloud Monitoring API paths with the data source&#39;s credentials, and read data from any project those credentials can reach. When the data source forwards the user&#39;s OAuth identity or uses Workload Identity Federation, the impact depends on that credential&#39;s permissions. Fixed in Google Cloud Monitoring plugin 12.6.7.</p> https://db.gcve.eu/vuln/cve-2026-107365